@stage-labs/metro 0.1.0-beta.147 → 0.1.0-beta.148

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.147",
+  "version": "0.1.0-beta.148",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.147",
+  "version": "0.1.0-beta.148",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/gateway/gemini-setup.ts

@@ -53,8 +53,29 @@ async function waitOperation(base: string, token: string, first: Record<string,
   return op;
 }
 
+const REASONS: Record<string, string> = {
+  DASHER_USER: 'this is a Google Workspace account; the individual tier needs a personal Google account',
+  NON_USER_ACCOUNT: 'this is not a user account',
+  RESTRICTED_AGE: 'the account does not meet the age requirement',
+  UNSUPPORTED_LOCATION: 'Gemini Code Assist for individuals is not offered where this account is located',
+  UNKNOWN_LOCATION: 'Google could not tell where this account is located',
+  RESTRICTED_NETWORK: 'the network this box is on is restricted',
+  INELIGIBLE_ACCOUNT: 'Google marks this account as not eligible',
+};
+
+function refuseIneligible(load: Record<string, unknown>): void {
+  if (isRecord(load.currentTier) || !Array.isArray(load.ineligibleTiers)) return;
+  const tiers = load.ineligibleTiers.filter(isRecord);
+  if (tiers.length === 0) return;
+  const validation = tiers.find((t) => t.reasonCode === 'VALIDATION_REQUIRED' && text(t.validationUrl) !== null);
+  if (validation !== undefined) throw new GeminiAuthError(`Google asks you to validate the account first: open ${text(validation.validationUrl) ?? ''} and then connect again`);
+  const said = tiers.map((t) => `${text(t.reasonMessage) ?? 'not eligible'} [${text(t.reasonCode) ?? 'UNKNOWN'}: ${REASONS[text(t.reasonCode) ?? ''] ?? 'no known reason'}]`);
+  throw new GeminiAuthError(said.join('; '));
+}
+
 export async function onboard(tokens: GeminiTokens, base = CODE_ASSIST_BASE, fetchImpl: typeof fetch = fetch): Promise<Onboarded> {
   const load = await call(base, 'loadCodeAssist', tokens.accessToken, { metadata: METADATA }, fetchImpl);
+  refuseIneligible(load);
   const tier = tierOf(load);
   const known = text(load.cloudaicompanionProject);
   if (known !== null) return { project: known, tier: tier.name ?? tier.id };

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.147"
+  "version": "0.1.0-beta.148"
 }